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Abstract 

Security constraint results in rate-loss in wiretap channels. In this paper we propose a coding scheme 
for two user Multiple Access Channel with Wiretap (MAC-WT), where previous messages are used as 
a key to enhance the secrecy rates of both the users until we achieve the usual capacity region of a 
Multiple Access Channel (MAC) without the wiretapper (Shannon capacity region). With this scheme 
all the messages transmitted in the recent past are secure with respect to all the information of the 
eavesdropper till now. To achieve this goal we introduce secret key buffers at both the users, as well 
as at the legitimate receiver (Bob). Finally we consider a fading MAC-WT and show that with this 
coding/decoding scheme we can achieve the capacity region of a fading MAC (in ergodic sense). 
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Rate loss 

Wyner in his seminal paper [[T]| on a degraded wiretap ehannel proved that by assigning 
multiple eodewords to a single message, we ean aehieve reliability as well as seeurity in a point 
to point ehannel. He eharaeterized seereey eapaeity for this ehannel. After a eouple of deeades of 
this work when wireless revolution began, researehers started extending Wyner’s eoding seheme 
(wiretap eoding) in different direetions. A single user fading wiretap ehannel was studied in [|2l|, 
Q. A seeret key buffer was used in flUl to mitigate the fluetuations in the seereey eapaeity due 
to variations in the ehannel gain with time. 

A multiple aeeess ehannel with seeurity eonstraints was studied in [[H and [[6l|. In Q the 
transmitting users treat eaeh other as eavesdroppers and an aehievable seereey rate region is 
eharaeterized. In some speeial eases the seereey eapaeity region is also found. In @ the authors 
eonsider the eavesdropper to be listening at the reeeiving end. The authors provide an aehievable 
seereey-rate region. The seereey-eapaeity region is not known for sueh a MAC. The same authors 
also studied a fading MAC with full ehannel state information (CSI) of Eve known at the 
transmitters. In [|71 this work is extended to the ease when the CSI of Eve is not known at the 
transmitters. Eor a detailed review on information theoretie seeurity, see lEl, llH, and ifTOll . 

In all these works a notion of weak seereey was used, i.e., if W is the message transmitted and 
Eve reeeives Z” for a eodeword of length n ehannel uses, then /(IE; Z'^')jn —)■ 0, as n —)■ oo. 
This notion of seereey is not stringent enough in various oases [|9l|. Maurer in iHTIl proposed a 
notion of strong secrecy: /(IE; Z”) —0 as n —)■ cx). Eor a point to point ehannel, he showed 
that it ean be aehieved without any ohange in seereey eapaeity. Sinee then other methods have 
been proposed for aehieving strong seereey IfT^ . lfT3ll and [IT4ll . The methods of IfT^ and lfT4l 
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have been used to obtain strong seereey for a MAC-WT in [|T5ll and IfT^ respeetively. 

In all these works we observe that seeurity is aehieved at the eost of transmission rate. For a 
single user AWGN wiretap ehannel if Cb is the eapaeity of the legitimate reeeiver (Bob) and Ce is 
the eapaeity of Eve’s ehannel, then the seereey eapaeity of this ehannel is Cg = (Cb—Ce)^, where 
(a;)+ = max(0,a;) ( IITtI ). In reeent years some work has been done to mitigate the seereey-rate 
loss. Feedbaek ehannel is used in iTTSl and IfT^ to enhanee the seereey rate, and under eertain 
eonditions the authors prove that the seereey eapaeity ean approaeh the main ehannel eapaeity. 
In [[20ll the authors assume that the transmitter (Aliee) and Bob have aeeess to a seeret key, and 
then they propose a eoding seheme whieh utilizes that key to enhanee the seereey rate. Seeure 
Multiplex seheme has been proposed in ETI whieh aehieves Shannon ehannel eapaeity for a 
point to point wiretap ehannel. In this model multiple messages are transmitted. The authors 
show that the mutual information of the eurrently transmitted message with respeet to (w.r.t.) all 
the information reeeived by Eve goes to zero as the eodeword length n ^ oo. 

Shah et al. in [[22l propose a simple eoding seheme, without any feedbaek ehannel or aeeess 
to some key, and enhanee the seereey eapaeity of a wiretap ehannel to the Shannon eapaeity 
of the main ehannel. In this work also, only the message eurrently being transmitted is seeure 
w.r.t. all the information possessed by Eve. In [l23Tl we extended the eoding seheme of to a 
multiple aeeess wiretap ehannel and showed that we ean aehieve Shannon eapaeity region of the 
MAC as the seereey rate region, while keeping eurrently transmitted message seeure w.r.t. all the 
information of Eve. In this paper we extend the eoding/deeoding sehemes of \Si22li and [|2^ to a 
multiple aeeess wiretap ehannel and prove that we ean aehieve Shannon eapaeity region of the 
MAC as the seereey-rate region while keeping all reeent messages seeure w.r.t. the information 
possessed by Eve till present. Finally we aehieve the same for a fading MAC-WT. 
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Rest of the paper is organised as follows. In Section [T] we define the channel model and recall 
some previous results which will be used in this paper. We extend our coding/decoding scheme 
of [l22l to two user discrete memoryless MAC-WT (DM-MAC-WT) in Section |2] and prove the 
achievability of Shannon capacity region, under the security constraint that only the currently 
transmitted message is secured w.r.t. all the data received by Eve. In Section [3] we consider a 
two user DM-MAC-WT where each user, receiver, as well as Eve have infinite length buffers 
to store previous messages. We propose a coding scheme to enhance the secrecy-rate region to 
Shannon capacity region of the usual MAC, this time with security constraint that all recent 
messages are secure w.r.t. all the information possessed by Eve. In Section |4] we consider a 
two user fading MAC-WT and extend the coding scheme of previous sections to enhance the 
secrecy-rate region of the fading MAC-WT to the Shannon Capacity region of the MAC in the 
ergodic sense. Section [5] concludes the paper. The Appendix at the end contains several lemmas 
used in the proofs of the main theorems. 

In this paper random variables will be denoted by capital letters X, X, Z etc., vectors will 
be denoted with upperbar letters, e.g., X = (Xi,... ,X„), scalar constants will be denoted by 
lower case letters a, b etc. 


1. Multiple Access Wiretap Channel 

A discrete memoryless multiple access channel with a wiretapper and two users is considered 
(Fig-[D- The channel is represented by transition probability matrix p{y, z\xi, X 2 ) where Xi G Xi, 
is the channel input from user i, i = 1,2, y E y h the channel output to Bob and z E Z h the 
channel output to Eve. The sets Xi,X 2 ,y,Z are finite. The two users want to send messages 
IRT) and to Bob reliably, while keeping Eve ignorant about the messages. 
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Fig. 1. Discrete Memoryless Multiple Access Wiretap Channel 


Definition 1.1. For a MAC-WT, a codebook consists of(l) message sets and 

of cardinality 2”^^ and 2'^^'^, (2) messages and W^'^\ which are uniformly distributed 
over the corresponding message sets and and are independent of each other, (3) two 
stochastic encoders, 




( 1 ) 


and (4) a decoder at Bob, 


The decoded messages are denoted by {W^^\ 

The average probability of error at Bob is 

pin) A p I fyi2)^ ^ ^^yil)^ ^yi2)^^ | ^ 


( 2 ) 


(3) 
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and leakage rate at Eve is 

Z^). ( 4 ) 

Leakage Rate: In |[^ the authors have defined two types of seeurity requirements depending 
upon the trust of the transmitting users on each other. If each user is conservative such that 
when the other user is transmitting then it may compromise with Eve and provide Eve with its 
codeword, then individual leakage constraints 

(5) 

’ n 

( 6 ) 

-(0 

are relevant, where X denotes the codeword for user i. 

In a scenario where users trust each other, collective leakage 

kE(2). z^). (7) 

n 

is relevant. Since, _L and hence also _L where X _L E denotes that random 
variable X is independent of Y, 

= /(lyW; Z^) + 

= - H{W^^'^\Z^) + /7(1E(2)) - 

< - H{W^^'^\Z^,Xl^) + H{W^‘^'>\Xl) - i7(lE(2)|Z”,Xf) 

= /(IEW; ^^ 1 X 2 ”) + /(1E(2); 
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= ni?^+r^<2 (8) 

and hence, if individual leakage rates are small then so is the collective leakage rate. In this 
paper we consider the secrecy notion ([7]). 

Definition 1.2. The secrecy-rates are achievable if there exists a sequence of codes 

(2”^i, n) with ^ 0 as n ^ oo and 

limsup = 0, for i = 1,2. (9) 

n—>-oo 

The secrecy-capacity region is the closure of the convex hull of achievable secrecy-rate pairs 

{Rl, i?2)- 


In a coding scheme to obtain the following rate region was proposed. 

Theorem 1.1. Rates {Ri,R 2 ) are achievable with limsup„_^oo = 0, i = 1,2, if there exist 
independent random variables {Xi,X 2 ) as channel inputs satisfying 


R,<I{Xp,Y\X2)-I{Xp,Z), 


R2<I{X2-,Y\X,)-I{X2;Z), 


Ri + R2< /(Xi, X 2 ; Y) - /(Xi; Z) - I{X2, Z), 


( 10 ) 


where Y and Z are the corresponding symbols received by Bob and Eve. □ 

The secrecy capacity region for a MAC-WT is not known. If the secrecy constraint is not 
there then the capacity region for a MAC is obtained from the convex closure of the regions in 
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Theorem 1 without the terms /(X*; Z), i = 1,2 on the right side of (fTOl) (Figl^ In the 
next section we show that we can attain the capacity region of a MAC even when some secrecy 
constraints are satisfied. 



Fig. 2. Capacity region and Secrecy Rate region of MAC 


2. Enhancing the Secrecy-Rate Region of MAC-WT 

In this section we extend the coding-decoding scheme of [l22l for a point-to-point channel to 
enhance the achievable secrecy rates for a MAC-WT. We recall that in [|22l the system is slotted 
with a slot consisting of n channel uses. The first message is transmitted by using the wiretap 
code of [dl in slot 1. In the next slot we use the message transmitted in slot 1 as a key along with 
wiretap code and transmit two messages in that slot (keeping the number of channel uses same). 
Hence the secrecy-rate gets doubled. We continue to use the message transmitted in the previous 
slot as a key and wiretap coding, increasing the transmission rate till we achieve a secrecy rate 
equal to the main channel capacity. From then onwards we use only the previous message as 
key and no wiretap coding. This scheme guarantees that the message which is currently being 
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transmitted is secure w.r.t. all the Eve’s outputs, i.e., if message Wk is transmitted in slot k then 


( 11 ) 

n 

as the codeword length n ^ oo, where Zi is the data received by Eve in slot i. 

In the following, not only we extend this coding scheme to a MAC-WT but also modify it 
so that it can be used to improve its secrecy criterion (fTTI) and for fading channels as well. The 
secrecy criterion used is the following: If user i transmits message W^ in slot k, we need 

for/ = fc, (12) 

for any given e > 0. This will be strengthened to strong secrecy, Zi, ..., Z*.) 

0 as n ^ oo at the end of the section (See the next section for further strengthening of their 
criteria). We modify message sets and encoders and decoders with respect to Section [Has follows. 

Each slot has n channel uses and is divided into two parts. The first part has rii channel uses 
and the second 77 , 2 , rii + 77,2 = n. The message sets are 2^^^^ for users 7 = 1,2, 

where satisfy (fT^ for some {Xi,X 2 ). The encoders have two parts for both users. 


ft 

: X /Cl ^ 

(13) 

ft 

: X /C2 ^ 

(14) 


where Xj e A), i = 1,2, and /Cj, 7 = 1,2 are the sets of secret keys generated for the respective 
user, //,7 = 1,2 are the wiretap encoders corresponding to each user as in [|^ and ff,i = 1,2 
are the usual deterministic encoders corresponding to each user in the usual MAC. User 7 may 
transmit multiple messages from in a slot. In the first part of each slot of 77i length, one 
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message from may be transmitted using wiretap coding via // (denoted by ^ in slot 
k) and in the second part multiple messages from may be transmitted (denoted by 2 ) 
using messages transmitted in previous slots as keys. The overall message transmitted in slot k 
by user , is w'^ = (IT® 

The following is our main result. 

Theorem 2.1. The secrecy-rate region satisfying HDit is the usual MAC region without Eve, i.e., 
it is the closure of convex hull of all rate pairs (i?i,i? 2 ) satisfying 


< J(Xi;y|X2), 


i?2 </(X2 ;F|Xi), 


/(i + i?2</(Xi,X2;y), 


(15) 


for some independent random variables Xi,X 2 . 

Proof: We fix distributions pxi,Px 2 - Initially we take ni = 02 = n/2. In slot 1, user i 
selects message G to be transmitted confidentially in the first part of the slot, while 
the second part is not used. Both the users use the wiretap coding scheme of [0. Hence the rate 
pair (i?i, R 2 ) satisfies (fT^ and < nie, f = 1, 2. In slot 2, the two users select two messages 
each, ( 11 ^ 24 , 11 ^ 2 ^ 2 ) lo be transmitted. Both users use the wiretap coding scheme 

(as in [O) for the first part of the message, i.e., for the second part user i 

first takes XOR of W 22 with the previous message, i.e., W 22 © • This XORed message 

is transmitted over the MAC-WT using a usual MAC coding scheme ( lf24l . [f251l f. Hence the 
secure rate achievable in both parts of slot 2 satisfies (fTOl) for both the users. This is also the 
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overall rate of slot 2. 

In slot 3, in the first part the rate satisfies (fT^ via wiretap eoding. But in the second part we 
XOR with 14^2 ^ and are able to send two messages and hence double the rate of (fTOl) (assuming 
2 (i?i,i?2) via (fTOl) is within the range of (fT5])f. We continue like this (Fig (3]). 

Define 

^ r IiX,;Y\X,) 1 

' I{X,-Y\X2)-I{X,-Z) ’ ^ ^ 

where [x] is the smallest integer > x. In slot Ai + 1 the rate of user 1 in the second part of the 
slot satisfies, 


Ri < min (Ai (J(Xi; Y\X 2 ) - /(Xi; Z )), /(Xi; XIX 2 )) 


= /(Xi;X|X2). 


(17) 


Similarly we define A 2 as 


Ao = 


nX2;Y\X,) 


I{X2;Y\X,)-I{X2;Z) 


( 18 ) 


In slot A 2 + 1, the rate R 2 satisfies 


R2<I{X2;Y\X,). 


(19) 


In slot A = max{Ai, A 2 } + 1, the sum-rate will satisfy 


Ri + R 2 < min < A 


/(Xi,X2;X)-^J(X,;Z) 


i=l 


,/(Xi,X2;X) 


( 20 ) 


After some slot, say. A* > A, the sum-rate will get saturated by sum-capacity term, i.e.. 
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(i?l, R 2 ) (i?i, i? 2 ) (2?i, R 2 ) (Pi, P 2 ) (2Pi, 2 R 2 ) 

< — m —X—n2—> i 1 i 1 

1^^^^^ 

0 I 

1 / 

/ ' 

3 

Wiretap 

Wiretap 

Secret 


Coding only 

A 1 

Coding 

1 

Key 


Vfc > A 1 

1 A; + 1 


Slots 


{Ri,R2){RhR*2) 


Fig. 3. Coding Scheme to achieve Shannon Capacity region in MAC 

I{Xi, X 2 ',Y), and hence thereafter the rate pair — (-^ 1 ,-^ 2 ) the second part of 

the slot will be at a boundary point of (fTSl) and the overall rate for the slot is the average in the 
first part and the second part of the slot. 

In slot k, (where k > A*) to transmit a message pair {W^^\ where W^i* 2)5 

i = 1, 2, we use wiretap coding for and for the second part, we XOR it with the 

previous message i.e., Wj. 2 ® hl^fc- 1 , 2 )* = 1)2, and transmit the overall codeword over the 
MAC-WT. (Fig. B 

To get the overall rate of a slot close to that in (fT5l) . we make n 2 = Ini. By taking I large 
enough, we can come arbitrarily close to the boundary of (fT5l) . 

For this coding scheme, PJ* —)• 0. A convex combination of the rates in (fTSl) can be obtained 
by time sharing. Now we show that our coding/decoding scheme also satisfies (fT^ . 

Leakage Rate Analysis'. Before we proceed, we define the notation to be used here. For user 
i, the codeword sent in slot k will be represented by Xj^ . Correspondingly, ^ and 2 will 
represent ni-length and n 2 -length codewords of user i in slot k. When we consider i to be 1 
or 2, i will be taken as 2 or 1 respectively. In slot k, the noisy codeword received by Eve is 


DRAFT 


January 17, 2017 




13 


Zfc = (Zfc 1 , Zfc 2 ), where 1 is the sequenee eorresponding to the wiretap eoding part and 2 
is eorresponding to the XOR part (in whieh the previous message is used as a key). 

In slot 1, sinee wiretap eoding of [[6l| is employed, the leakage rate satisfies, 

< me, < me. (21) 

For slot 2 we show, for user 1, 

/(irS'^Zi,Z 2 |xf) <me, 

/(W^'^Zi,Z 2 |X^'^) <me. (22) 

Similarly one ean show for user 2. 

We first note that 

i(Wf^-,z,,Z2\xf) 

= J(irS'^;Zi) + /(WS'^Z2|Zi,xf) 

< + ,Z2) 

= me + H{W^^^\Zi) - H{Wf'’\Zi) = me. (23) 

where (a) follows from wiretap eoding and (b) follows by the faet that ± Zi), and 

(xf,Z2)±(TFS'\Zi). 

Next eonsider 

/(TF^'^Zi,Z2 |xf) 
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= i{W^^l-z^,z,\xf) + i{W^^l-z,,z^\xf,w^^l) 

= h + h- (24) 


We get upper bounds on Ii and I2. The first term, 


h = i{W^^l-z,,Z2\xf) 

= I{W%Z,,Z2,l,Z2,2\xf) 

= Ziixf)+Z2,iixf, zo 

+ /(W^|];Z2,2|xf ,Zi,Z2,i) 

= 0 + Z2,i|Xg,xg, Zi) + Z2,2|Xf, Zi, Z2,i) 

= /ii + / 12 , (25) 


where (a) follows because Zi _L ((^21^ 2^2^^). Furthermore, 


Ill = I{W% 


Z2,i|xg,xg,Zi) 


= H{W% |xg, X®, zo - H{W% 1 ^ 2 , 1 , x% xg, zo 


H{W% |xg) - H{W% |Z 2 , 1 , xg) 
= /(Wg; Z2,i, |xg) < ni6, 


(26) 


where (a) follows since (X^^^)-^i) -*- (^2^1)-2^2,1,262^]) and (6) follows since the first part of 
the message is encoded via the usual coding scheme for MAC-WT. 
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Also, 


/l2 = /(W^!J;^2,2|Xf,Zi,Z2,l) 

-if(Tr^;i|Xg,Xg,Zi,Z2,i,Z2,2) 

H{W[% \xflz2,i) - |X®, Z2,i) = 0, 


where (a) follows since Zi, Z2,2) -Z {W^^X^}, ^2,1). 


From (l 24 l) . ( 1251 ) and (| 2 ^ we have Ji = In +112 < riie. 


Next consider, 


l2 = I{W^l-,Zr,Z2\xf,wfl) 

= Ziixf Z 2 ). (27) 


We have. 


= /(W^g;^2,i|xf, + /(Wg; Z2,2|Xf,Z2,i) 

^^^0 + J(Tr2;Z2,2|xf,^S>^2,i) 

Z2,2|Xg) 0, 

and (ai) follows since TF2I2 ^ (^2,1, (02) holds because ^ (^2!2,^2,2,X25); 

and (03) is true since W^2,2 -*- (-^2^2; ^2,2)- 
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Also, 


I{W%Z,\xf,W%Z2) 

= |Xg, xg, Wg, Z2,1, ^ 2 , 2 ) 


/(1X^5;Zi|X^5,Z2,2) 0, 


where (61) follows since (1X24, ^2,1, X^^]) ± (^2,2, X2^2) ^1))’ (^2) follows because 

Zi Z -^2^2) ■^2,2)- Hence from ( 1271 ) we have /2 = 0 . 

From (l 24 l) we have 

/(W^'^Zi,Z 2 |xf) <nie. (28) 


Similarly one can show that 

/(Wf;Zi,Z2|X^'^) <ni6. 


(29) 


Therefore, from ([8]), 


J(lX^'\lxf;Zi,Z2) 

< /(W^'^Zi,Z2|xf) + /(Wf ;Zi,Z2|X^'^). 

To prove that (fT^ holds for any slot, we use mathematical induction in the following lemma. 
For a proof, please see lf23l . 

Lemma 2.2. Let ([72]) hold for k, then it also holds for k + 1. 


Remark (A note about strong secrecy). The notion of secrecy used above is weak secrecy, i.e.. 
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if message W is transmitted and Eve receives Z"-, then I{W] Z"') < Uie. Strong Secrecy requires 
that I{W] Z"^) < e. In single user case, if strong secrecy notion is used instead of weak secrecy, 
the secrecy capacity does not change ( [[26ll ). The same result has been proved for a multiple 
access channel with a wiretapper in lIT^ using the channel resolvability technique. In our coding 
scheme of Theorem 2 if we use resolvability based coding in slot 1, and in subsequent slots use 
both resolvability based coding (in the first part of the slot) and the previous message (which is 
now strongly secure w.r.t. Eve) as a key in the second part of the slot, we can achieve the same 
secrecy-rate region (capacity region of usual MAC without Eve), satisfying the leakage rate 

limsupI{Wi\Wf'>-Z,,Z,,...,Zk) = 0, (30) 

n—>-oo 

as 77, —)■ CX3, because in the RHS of (fT^ . we can get e instead of 277ie. 


3. Discrete Memoryless MAC-WT with Buffer 





Bf> 


Fig. 4. Discrete Memoryless Multiple Access Wiretap Channel with secret key buffers 


In this section we improve the result in Theorem 3.1 by obtaining rates ([T?]) while enhancing 


January 17, 2017 


DRAFT 






















18 


the secrecy requirement from (fT^ to 

< lli€, 

/(irf ,wfy,...,'irL\;Zi,...Ai4'') < ni£, 

/(Tr“,W'f < 2ni£, (31) 

where Ni can be arbitrarily large. This will satisfy the requirements of any practical system 
For this, we use a key buffer at each of the users and instead of using the messages transmitted 
in slot {k — 1) as the key in slot k, we use the messages transmitted in slots before k — Ni — 1. 

Let each user has an infinite key buffer to store the key bits. The message after trans¬ 
mission in slot k from user i is stored in its key buffer at the end of the slot. However now in 
slot fc + 1 we use the oldest bits stored in its key buffer as a key in the second part of its slot. 
Once certain bits from the key buffer have been used as a key, these are discarded from the key 
buffer. Let be the number of key bits in the key buffer of the user at the beginning of 
the k^^ slot. Then out of this, for k > X*, the number of key bits used in a slot by user 1 is 
Cin 2 (since these are used only in the second part of the slot) where Ci < I{Xi;Y\X 2 ), while 
the total number of secret bits transmitted in the slot is Cin 2 + Ri^^ni. These transmitted bits 
also get stored in its key buffer at time k + 1. Similarly it holds for user 2. Thus —)■ cx) as 

/c —)■ cxD for i = 1,2. 

After some time (say N 2 slots) since we are using the oldest bits in the key buffer, for k > N 2 , 
we will be using the secret key bits only from messages {W\ ,W 2 for securing 

_(2) _(2) _(2) 

messages for user z = 1,2 respectively. The following proof works for 

'in many countries, confidential messages beyond a certain period are declassified by law. 
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A^i > 0. Theorem 2.1 wa for Ni = 0. 

Theorem 3.1. The secrecy-rate region (with the leakage rate constraints (I22])j of a DM-MAC-WT 
equals the usual Shannon capacity region ((75]) of the MAC. 


Proof: With the proposed modifieation of this seetion to the eoding-deeoding seheme of 
Seetion 3, in any slot k, the legitimate reeeiver is able to deeode the message pair 
with probability of error Pe^'^ —)■ 0 as n —oo. Also (fT^ along with < niCip = 1,2 
eontinue to be satisfied, where ei > 0 will be fixed later on. 

Now we eonsider the leakage rate. We have, 




(32) 


From Lemma lA.ll and Lemma IA.2I in the Appendix, 




T?7(l) ^ 




,Zk\xf) 


< riie 


(33) 


and 


Hw^Awi'P,. 




,Zk\xf < 6n,e 


(34) 


Thus, taking e = e/7, we obtain the first inequality in (|3T]) . Similarly we ean show the seeond 
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inequality. 

To prove the third inequality we define 1^(1) 4 = (Wf 

and Z = (Zi,...,Zfc), and we have 

= /(W«;Z) + /(iy(2).^|^(i)) 

= - H{W^^^\Z) + _ /7(^(2 )|^^^(i)) 

< ) - i7(lTW|Z,xf) + 

= /(W«;Z|Xf) + J(lT(2);Z|xi'^), (35) 

where (a) follows from the faets: eonditioning deereases entropy, messages are independent and 
a eodeword is a funetion of the message to be transmitted. Henee, from (l3^ and (l34l) 

< n,e. (36) 


4. Fading MAC-WT 

In this seetion we eonsider a two user diserete time additive white Gaussian fading ehannel. 
If Xi, X 2 are the ehannel inputs, then Bob reeeives 

r = H^X2 + H 2 X 2 + N, (37) 


and Eve reeeives 


Z = GiAi + G2X2 + N2, 


(38) 
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where Hi is the channel gain to Bob, Gj is the channel gain to Eve and iVj has Gaussian 
distribution with mean 0 and variance af, i = 1,2. We assume that the random variables 
Hi, H 2 , Gi,G 2 ,Ni,N 2 are independent of each other. The channel is experiencing slow fad¬ 
ing, i.e., the channel gains remain same during the transmission of the whole codeword. Let 
Hi = \Hi\‘^ and Gi = |Gip, i = 1,2. Average power constraint for user i is Pi. 

We define some notation for convenience. For H = {Hi,H 2 ), G = (^ 1 ,^ 2 ), 


Gi{Pi{H,G)) 

G2{P2{H,G)) 

Gt{Pi{H,G)) 

GI{P2{H,G)) 

G{Pi{H,G),P2{H,G)) 


A 


A 


A 


A 


A 


hog(i + 

ilog(l + 
ilog(l + 
ilog(l + 
ilog(l + 


HiPi{H,G)\ 

J 

H2Pi{H,G)\ 

J 

GiPi{H,G) \ 
ai + G2P2{H,G) ) 
G2P2{H,G) \ 

ai + GiPiiH,G)) 
HiPi{H,G) + H2P2{H,G)\ 

J 


(39) 


An achievable secrecy rate region for this channel is 


K‘(p) = 


(40) 


P2<Eh,g[(C'2(P2)-G|(P2))+] 


Pi + P 2 ^ E//, 


G 


(c(p,,P2) - 


(41) 


where P = (Pi,P 2 ). To achieve these rates (with Pi{H,G) = Pi), the transmitters need not 
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know the channel states, but Bob’s receiver needs to know all Hi, Gi. We assume this in this 
section. 

If the channel states {H,G) are known at each of the users as well as at the receiver of Bob, 
then we can improve over the rate region in (l4TI) by making the transmit powers as functions 
of {H,G): 

V: H xG^Rl, (42) 

where V = {Pi,P 2 ). Now we denote the rate region as Cj{P). We note that the secrecy capacity 
region of MAC-WT (Cj{V)) is not known, but C Cj{V) IIZTl . 

Now we use the coding scheme of Section 3 to the two user fading MAC-WT to enlarge the 
secrecy rate region to the usual capacity region of the fading channel. Message pair 
is to be transmitted confidentially by the two users over the fading MAC in slot k, and will 
be stored in their respective secret key buffers at the end of the slot. Let be the 

number of bits in the key buffers of users 1 and 2 respectively at the beginning of the slot k. 
Let Rj. bits be taken from the key buffer of user i to act as a secret key for transmission of 

-(i) 

message IL^ . The two users satisfy the long term average power constraint 

k 

\imsupj'^E[Pi{Hk,Gk)] < Pi, i = 1,2, (43) 

k^oo ^ 1 

m=l 

where H^, Gk are the channel gains in slot k and Pi{Hk,Gk) is the average power used by user 
i in slot k. We need to compute Pi{H,G) and R\. ,i = 1,2 such that the resulting average rate 
region (r^^^r*^^^) is maximized, where 

1 ^ 

= limsup—(44) 

fc—>cx> ^ , 
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is the transmission rate of user i in slot k, subjeet to the long term respective power constraints 
(|4^ . The secrecy-rate region is computed when 

Fr({ififc > Gifc} U {H2k > G2k}) > 0, (45) 

where Pr{A) represents the probability of event A. Otherwise, the secrecy rate region is zero. 
Actually we state the following theorem for Pr{Hik > Gik) > 0,z = 1,2. If it is not true for any 
one i then the secrecy rate for that user is zero. For both the transmitting users, at the end of 
slot k, = n{l + bits are stored in the secret key buffer for future use as a key, where 
712 = Ini- Hence evolves as 

= (46) 

where ^k ^ > and with positive probability Pr{Hik > Gik). Therefore, 

oo a.s. for i = 1,2. 

Theorem 4.1. If Pr{Hik > Gik) > 0, i = 1,2, and all the channel gains are available at all the 

transmitters, then the following long term average rates that maintain the leakage rates t UTl) . 

are achievable: 

Ri < \EH,G[Gi{Pimi 
R2 < ]^£h,g[G2{P2{H))], 

Ri + R2< ^Eh,g[C'(Fi(F),F2(F))]. (47) 

where P is any policy that satisfies average power constraint. If only Bob knows all the channel 
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states but not the transmitters, then (i?i,i? 2 ) satisfies d47l) with PfiHfi) = Pj, i = 1,2. 

Sketch of Achievability Scheme: We use the eoding-deeoding seheme proposed in Seetion 3 
with appropriate changes to account for the fading process. Assuming = 0, i = 1,2, user i 
transmits the first time when Hi^ > Gik- Then it uses the usual MAC wiretap coding as proposed 
in |[6l in all its / + 1 mini-slots. 

In the next slot (say user i uses the first mini-slot for wiretap coding (if Hik > Gik for 
user i) and the rest of the m mini-slots for transmission via the secret key (if Hik < Gik the first 
mini-slot is not used). It uses = mm(^B^\lGi{Pi{H,G)ni)^ key bits which are removed 
from the key buffer at the end of the slot. The total number of bits transmitted by user i in slot 
k is 

ff = Pf + nfiGfiPi{Hk,Gk)) - Gt{P^{Hk,Gk)))^. (48) 

These bits are stored in the key buffer at the end of the slot. Thus > P^k ^rid since 

Pr{Hik > Gik) > 0 ,i = 1,2, Pr(4*^ > Rk^) > 0. Thus B^^^ oo a.s. for i = 1,2. 

Also, as before, we can show that after some slot k > N 2 , with an arbitrarily large probability, 
the messages transmitted in slots k, k — 1 ,..., k — Ni will use the messages transmitted before 
k — Ni — 1, and the rate used in the first minislot will satisfy (|4TI) but the rate used in the second 
minislot will satisfy (1471) . The overall rate of the slot can be made as close to (1471) as we wish 
by taking I large. Thus the rest of the proof to show Pf 0 and that (!?!]) is satisfied follows 
from Theorem 3.1. 

All the above results extend in strong secrecy sense as in Section 3, by using the resolvability 
based coding scheme of ffT^ instead of usual wiretap coding for MAC-WT of 
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5. Conclusions 

In this paper we obtain the secrecy-rate region for a slotted multiple access wiretap channel. 
We show that by using the previous message as a key in the next slot we can achieve secrecy- 
rate region equal to the capacity region of a MAC, if we consider the secrecy rate of individual 
messages. We then extend the result to the case where an arbitrarily large number of recent 
multiple messages are secure w.r.t. the information of Eve, by using the secret key buffer for 
both the transmitters. Finally, we further extend our coding scheme to a fading Gaussian channel 
and show that the usual Shannon capacity region can be obtained while retaining the secrecy of 
the multiple messages. 


Appendix 

Lemma A.l. The following inequality is satisfied 

rn'll Trriu,.... .... Zt\xf) < Mt. 


(49) 


Proof: We have 

mZ. (Pi- 1 . 1 . (Pi-jv.,i;Z’i. ZiilVf) 

+/(■ir'‘iuiZ„ z*|Vf, ir';!) 

+ - + ^((PiA.,iiZi. WiA.+u) 

= Ii + I2 + ■■■ + Ini (50) 
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Now let us evaluate each term. Denoting the two parts of by i,Zfc 2, and choosing the 
wiretap coding with leakage rate < niei, where ei = e/Ni, 


h = /(wSiZi.i, Zi,2, Zt,u :zfc2ivf) 

= + /(irSiZi, Zt,2\xf) 

< n,ei + /(irgiZi, Z«|Vf,) 


= n,£i + i/(U-™|A'f) - , Zi, .... Z»_,, Zt,2) 

S me, + ir(W2|Af) - -ff(W2|Af) = me,, (51) 


where (a) follows from wiretap coding and (b) follows since (Zi, 


Zk-l: Zk,2, 




( 1 ) ^( 2 )s 

fc,l ’ J 


Next consider I2. We have, 


/2 = /(Wl‘li,,;Z„ Zmi,i, Zm,, 2 , ZelAf, W'”) 

= /(Wl.m,,;Zmi,i|Af, Wg) + /(Wi‘li,i;(Z„ Ze)\Zm,,i|Af, lV 2 , Z^,) 

= , TVi'l) - i/(W™i,,|Af, Zmi.i) 

+ /(W'‘i,,i;(Z„ .... Ze)\Zm,,i|Af, Tr'‘|, Z^,) 

= .... ZO\Zmi,i|Af, wg, Zmi) 


= .... Ze)\Zmi,i|Af, W, 


., , Wg, z,_i) 

= niei + /(Wi'2i,i;Zi, ... 

,, Zfc_i,2, Zk\xf\W^l Zk-i) 

= n,e, + I{Wil,y:Z,..., 

Zk-2\xf\ wi'J, z,_i) 
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+ I{Wil,y:Zk, Zfc_i,2|xf ..., Zk- 2 ) 

mei + 0 + ^fc-1,1^1, Zk-2) 

= mei + , Wi;|, ..., 




Zfc_i,2|xf, Zi, 


Zk-2, Zk,l) 


= mei + H(W^^l,y,\xf\ Wi^l, ..., Zfc_2) 

- , Wi;|, ..., Zfc_2, Zk,i) 

+ i{Wil,y:Zk,2, Zk-i,2\xf\ wi'l, Zk-,,1, z,, ..., Z,_2, Zfc,i) 

mei + - H(W^^l,y,\Zk-i,i) 


+ I{W^l,y,Zk,2, Zk-i,2\xf\ Wi% Zk- 1 , 1 , Zi, ..., Zk-2, Zk,i), 


(52) 


where (a) follows sinee and Zk-i)±{xf, W^^), {b) fol¬ 
lows from wiretap eoding, (c) follows since Zk-i)Z{Zi, ..., Zk- 2 , 

(Zi, ..., Zk-2)MX^k\ ^S) and (Z,, ..., Zk-i)±(xf\W^f^l) and (d) follows since Zk-i,i)± 

(xf\ IF2, Zi,..., Zk-2). 


But, 


i(W[\,-:Zk, 2 , Zk-i, 2 \xT, w[^l Zk-I,i, z ,,..., Zk- 2 , Zk,i) 
=H{Wi\,\xf\ Zi, ..., Zk-2, Zk,i) 

- H{Wil,jx^^\ wg, Zk-,,1, z,, ..., Zk-2, Zk,i, Zk,2, Zk-1,2) 


=0 


(53) 
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where (a) follows, since Zt-u)Mxi^\ H' 2 , Zu .... Zt-2. Z^) and (H'l'i,,,, Zt_u)l 

(x'-\ z., ...,z*_ 2 . Zk,i, Zk,2, Zk-1,2) Hence we have 


l 2 <niei. 


( 54 ) 


One can similarly prove that Ii<niei for i= 3 , 4 , Ni. Hence, 

nwi% ..., Z,\xf)<N,ne,=n,e. ( 55 ) 


Lemma A. 2 . The following inequality is satisfied 




W 


( 1 ) 




Ztix'y, 


f(1) 


f{1) 


Wi;,, < 6nie. 


( 56 ) 


Proof: 


nytll wt,,,, .... w[\,,y;z„ .... z^ixS;"’, wi), .... 

= mZ, .... m"1-«.,2;z’., .... zt-M-iivf, Trg, wi'iu,.... 

+ /(TFl'i .... .... ZilXf, TFg, .... Zi..... Zi-w.-i) 

'= 0 + .... Tri\.,2iZt_„„ .... ZelXf, F‘‘;. Wl'li,,..... X..... Zt_„,_,) 

= /(W2. iFl\,,2;Z»-A.„i..... Zi.iixf. wi), .... Zi..... Z»_A,,_i) 


+ mtl »i-i.2.....i;Zt-A...2,.... z,_,ix'y, ivi;*, iv™,,,.... „ z„.... z»_„._i, 
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= 0 + nwil ..., wilj,^^,-:Zk-Nu2, -, Zk,2\wil ..., Zi,..., 


■( 2 )^ 


^k—Ni,!") ••••) ^k—l'j ^k ) 


I{W^l ..., ..., Zk-N,, xf) 


= liw^^^MZi, xr), 


-^ 7 ( 2 )^ 


where (a) follows, since (IV™, ..., 1 (Z,..., Zj_„,_i, IV™, .... xf), (b) 

follows, since (iFl^ F™i,2, ..., is independent of the other random variables (r.v.s) 

in the first expression, (c) follows since ..., n •••i is independent 

of all other r.v.s in the expression, and in the last inequality we denote the respective random 
sequences with their respective widehat symbols. 

Now we observe that 


Xf) 

< I{wi^^;Z„ Z^ixf) 

= /(l?«;Z2|xf) + I{W^^'>MZ2, Xf^) 

^=^0 + /(l?«;Zi|Z2,xf) (57) 


where (a) follows since 1X2^^ ± {Zi, X^^^), and ( 6 ) follows since 1X2^^ -L {Z2, xf^). 

We will also use the following notation: ..., lXfc-Ari,i), Ai are the indices of 
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messages transmitted in slots 1 , k—Ni — 1 that are used as secret keys by user i for transmitting 
messages in slots A;, = (Wk\ k e = (wf, k e { 1 , A; -iVi - 1 }), 

similarly we define Then we have 


Xf) 


< mf\ wZ WZZi. IZ2, X'Z) 

= mZ wz.zi, ixf, z,)+nwZ;ZiiA'\ ^ 2 , w;;;, wz 

< HwZ + i(wZZ\xf, z wZ w'Z 
S Kw'Z WZZ) + 0 

= wZ,, WZ2, wZi.zi) 

= HwZi, wZuZi) + i(wZ2, wZ^ZiwZi, irJii) 
i(wZu i^ZZi)+0 
= HwZi;z,) + WZiZlwZ,) 

< t(wZv + wZiZiwz,) 

< 2n,, +/(WZuZil^Zi) 

s 2 n,£ + I(WZi:Za„ Za^IWZi) 

= 2n,e + I(W<Z;Za,IW'Z) + ZxJ 


— 2nie + Ji + /2 (58) 


where 
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. (a) follows because (TFJ, Wfj ^ {Z 2 , xf) 

. (b) follows since ^ (W^^l Wf^, Z 2 , Zi 

. (c) follows since ^2,2) ^ (^1, ^2,o ^2,i) 

• {d),{j) and (m) follows by wiretap coding 
. (e) follows since Zi = (Zi, ..., Z^-n^) = {Za^, Za^) 


Now we evaluate 1 2 , 


h = /(■ir2.,;z.4siw!;;.,, z^,) 

= 'Za,) - H[W^ZiWZv Z*. Zai) 

'=' Z*,1, Z*,2) - Za,a) 

=’ Za,a) - Za,a) = 0 (59) 


TT 7 ( 1 ) 


TT 7 ( 1 ) 


where (a) and (6) follow because IX^' ^ and IX^' ^ are used as keys only in slots k — Ni 


k. 


Next we evaluate Ji, 


A = m-'AA^Ajwf^A 


= A»'Sn4.,l. 


= m’MnAA’Z a,\w'1\A + W'SnAS, 1 ) 


= h + h 


(60) 


Now 


h = HW^Zr,AU,Z A,\w'Zi) 
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Hw‘ilr.Ai.vZA,nA,,ZA,nA.,\wZi] 




— hi + h 2 - ( 61 ) 


Consider, 


hi = HWAh. i-:ZA,nAl\WZ .) 

= hwf,r.A-, i;Z. 4 ,n^j, 1 . Z. 4 ,n 4 l 5 , 2 |W'™,i) 

= + liW^AAfjiZA^nA-jW’Zn Z*n4j,l) 

< hW^llnAi.i’ ^ZnAliiZA^nAti) + 0 

(b) 

< 2 nie, ( 62 ) 


where (a) follows sinee ZA2nAi,2 -L -^^AanAf,!), (&) follows from wiretap 

eoding and that W^aI,i -*- ZA2nA'i,i)- eonsider the 2 ”'^ term of (IMl) . We get 

hi = /(W 2 n 4 ;,i;Z*n 4 l.|H^! 4 .’,i. Z^n^j) 

— ^(^'^. 42 n 2 lJ,ljZ^,n 4 i,l) Z 42 n 4 i, 23 '^^i)i) Z_ 42 n 4 =) 

— h^^AinAf,i'A'^iii-^iAl^Al,i' ^A^nA'i) + ^(^'^! 42 n 45 ,i!Z 42 n 4 i, 2 |l^ 4 i(n Z 2 i 2 n 2 lj> Z 42 n 2 li,i) 

= /(»' 2 n/.;,i;Z 42 n 4 .,l|W^(,l. Z 2 . 2 n^s) + 0 

= H(^ZaA‘,.WZii ^A,nAi) - i/(W2n4;,i;|M^!4.’,i. Z42n2l.,i) 

= H(W^]2n.4s,l|Z^2nAj) - H(W<^*nAlllZA,nA-J 


DRAFT 


January 17, 2017 


33 


= 0 


(63) 


where (a) follows since ZA,nA ,,2 -L (H-'Siin/i;,!. Z/ijn/i,,i). (*>) follows since 

W'Z, 1 (W'Zaii, Za^haO and (W'Zi, Z4,n.4„i) -1- (ZZaii, Za^cai). 


Finally we consider 


f4 = kw'Za.a^^z^^iZZ’ ZZaZ 

= f(fr!2n4,,iiZ-4,,i. Za.aW'Zi, W^nA-Z 

= f(ir!2n4.,i!Z4„i|ir!;;,,. w'ZaZ + nwZA,A^A,3\wZi< w'Za^.a, za,a) 

= HwZa.a^A, i0ZA^ + » 

= -f(W^*n4,,iiZ4,n4..i. 2.4.045,1 F|,>n45,i) 

= f(fr!l.’n4.,i!Z4.n4..il»i;.’,i. + /(TrJ’n4.,iiZ4.n4S.i|Tr!4‘;,i, ^2045,1. 2.4.04.,.) 


< 


f(W''2n4.,l. W''2o4.,.;Z.4.n4,,i|W''!i;,i) + H(Z^.^aiaZZa- W^nAiA^ 24.04,,l) 

H(ZA,nA‘,A\wZi, wZa’A, Z4.n4„l. W'2o4.,i) 


(b) 


\^} _ _ (2) _ _ (2') 

< 2nie + -f^(^.42n4i5;,i|W^A2nyif,i) “ -^(^442nAf,i|W^A2nAf,i) 


= 2nie, 


(64) 


where (a) follows, since Za 2,2 is independent of the rest of the terms in the expression, (6) follows 


TI7(2) 


because (Z^^nA^.i, 


-L (i^AiV5^A2nAi,i) and (Z^jnAf.i; 


T?7(2) 


w 


A2nA'f,i. 




(<A, 


^A2nAf,i, 


A2r\Ai 


,l)* 


Hence we have from (l60l) that I < Qnie. Thus we get. 
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Xf)<6nie, 


(65) 


whence the lemma is established. 
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